Bug 781256 - [FEAT] cli commands should be selectively accepted from unprivileged users
Summary: [FEAT] cli commands should be selectively accepted from unprivileged users
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: rpc
Version: mainline
Hardware: Unspecified
OS: Unspecified
high
unspecified
Target Milestone: ---
Assignee: Amar Tumballi
QA Contact: Vijaykumar Koppad
URL:
Whiteboard:
Depends On:
Blocks: 817967
TreeView+ depends on / blocked
 
Reported: 2012-01-13 05:04 UTC by Csaba Henk
Modified: 2014-08-25 00:49 UTC (History)
5 users (show)

Fixed In Version: glusterfs-3.4.0
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-07-24 17:36:56 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:

Attachments (Terms of Use)

Description Csaba Henk 2012-01-13 05:04:40 UTC 
Description of problem:

We should be able to decide on a per-command base whether an unprivileged user can access that functionality
Comment 1 Anand Avati 2012-01-21 13:28:28 UTC 
CHANGE: http://review.gluster.com/2640 (cli: exit with error if connection problem occurs) merged in master by Anand Avati (avati)
Comment 2 Anand Avati 2012-01-21 13:33:25 UTC 
CHANGE: http://review.gluster.com/2641 (rpc: extend actors with flag signing if privilege is required) merged in master by Anand Avati (avati)
Comment 3 Anand Avati 2012-02-03 03:34:48 UTC 
CHANGE: http://review.gluster.com/2695 (Revert "mgmt/glusterd: Allow insecure ports by default") merged in master by Vijay Bellur (vijay)
Comment 4 Kaushal 2012-05-31 10:55:21 UTC 
Tested on v3.3.0qa44. By default, only selected commands are accepted by glusterd from unprivileged users. These commands presently only include 'gluster system:: [getwd|mount|umount]' used by the gluster mountbroker service.

Eg output,

As root,
-!- ~ » glusterd
-!- ~ » 

As unprivileged user,

--- ~ » gluster system:: getwd --log-file=cli.log
/var/lib/glusterd
--- ~ »
Note You need to log in before you can comment on or make changes to this bug.